Static task
static1
Behavioral task
behavioral1
Sample
a37cfc5c7ff82cf46539abf909f5f6ee_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a37cfc5c7ff82cf46539abf909f5f6ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a37cfc5c7ff82cf46539abf909f5f6ee_JaffaCakes118
-
Size
80KB
-
MD5
a37cfc5c7ff82cf46539abf909f5f6ee
-
SHA1
ad6d99aef4a1815c079d0917e05fffa6e382216c
-
SHA256
c1d61edffdcfdef2a012f5685dc2d4a55e17907de1e67b0c6b36b6324c318dc6
-
SHA512
64adc33775a843707af4a5c9c97f0de60f34136db0bbde49803537792fc5473373ecfc1fa9d58faeaadd8c6c9fb2f4da87f86f0c272cd7c8297974a48acbf44d
-
SSDEEP
1536:frWPWV4OvLjjL67Ue+UJE5ENnvMM/qJ5scT94i5:DWPWXDjj2oiJE52H/wX9b5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a37cfc5c7ff82cf46539abf909f5f6ee_JaffaCakes118
Files
-
a37cfc5c7ff82cf46539abf909f5f6ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ab8e6443e77403969074b324578aff4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CalcMenuBar
GetWindowTextA
GetCursor
GetDlgItem
GetMenu
EndDialog
CloseWindow
AppendMenuA
DrawTextA
AppendMenuW
CopyIcon
CreateIcon
CopyRect
DrawTextW
BlockInput
AlignRects
GetDC
GetFocus
GetDC
CloseWindow
BlockInput
IsMenu
DialogBoxParamA
AppendMenuA
CopyRect
GetDlgItem
GetWindowTextA
DialogBoxParamW
DrawTextA
DrawIcon
LoadCursorA
CopyImage
GetWindowTextLengthA
InsertMenuA
GetMenu
EndDialog
DrawTextW
comctl32
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Create
ImageList_DragShowNolock
ImageList_GetImageRect
InitCommonControls
ImageList_GetDragImage
ImageList_Read
ImageList_EndDrag
ImageList_DrawIndirect
ImageList_Replace
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_DrawEx
ImageList_DragEnter
ImageList_LoadImage
ImageList_AddMasked
ImageList_GetIconSize
kernel32
GetLastError
SetLastError
GetModuleFileNameA
GlobalFree
DeleteFileA
lstrlenA
GlobalAlloc
CloseHandle
FreeLibrary
GetFileAttributesA
Sleep
WideCharToMultiByte
lstrcmpA
GetFileSize
lstrcpynA
GetModuleHandleA
GetFileType
GetCommandLineA
GetStdHandle
advapi32
RegEnumKeyA
RegDeleteKeyW
RegGetKeySecurity
RegEnumValueW
RegQueryValueExW
RegReplaceKeyA
RegReplaceKeyW
RegEnumValueA
RegFlushKey
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueW
RegDeleteValueA
RegQueryValueW
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyW
RegQueryInfoKeyW
RegCreateKeyW
RegLoadKeyW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.resr Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ